Remove Web Application Proxy Server From Cluster -
Error: "Could not contact the AD FS configuration sync service"
You need local administrative rights on the proxy servers and Active Directory credentials to manage the server objects.
Verify that the AD FS farm itself is healthy and accessible.
Sometimes, after uninstalling the proxy role from a server, it may still appear in management consoles. In such cases, the primary step is to update the central configuration—like overwriting the connected servers list—rather than relying solely on local uninstallation. remove web application proxy server from cluster
This guide outlines the standard procedures to gracefully decommission a WAP node using PowerShell and Server Manager. 1. Removing the WAP Node via PowerShell
This typically indicates that the host remains defined in your hardware load balancer health check paths or Windows NLB settings. Double-check that all network load balancers have completely deleted the IP of the old node.
Ensure external/internal records no longer point to the removed IP. Certificate Authority Error: "Could not contact the AD FS configuration
Locate the backend pool for your web application proxy cluster. Set the target WAP server status to or Disabled . Monitor active connections until they drop to zero. Step 2: Uninstall Web Application Proxy via PowerShell
Verify that all remaining configuration items show a green checkmark.
Regardless of the specific technology, removing any proxy server from a cluster follows a common, high-level pattern. Adhering to this process is critical for ensuring your application remains available. In such cases, the primary step is to
The removal command didn’t replicate across the AD FS farm. Fix: Force configuration replication:
– Use a client outside your network to log into a federated application. Authentication should work via the remaining WAP servers.
⚠️ : Removing a WAP server is not as simple as shutting it down. Orphaned configuration objects in AD FS can cause certificate validation errors and proxy trust issues for months.
How to Remove a Web Application Proxy Server from a Cluster Managing a Remote Access deployment often requires scaling your infrastructure down or replacing aging nodes. When using Web Application Proxy (WAP) in a cluster, simply shutting down a server isn't enough; you must gracefully remove it to maintain the integrity of your AD FS (Active Directory Federation Services) publishing environment.























